I never said anything like that about code signing (you may want to check out "in comments" section of the guidelines: https://news.ycombinator.com/newsguidelin

I never said anything like that about code signing (you may want to check out "in comments" section of the guidelines: https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html). Code signing allows software vendors to opt in to a reputation based scheme of authenticating software. There is nothing like that on Linux. There are similar systems within distros (Debian Developers, Arch TU etc.) but each one of them is for that one particular distro. EV Code Signing certs require that the private key is stored on a hardware token (so it's harder to misuse). This is also something that's not utilized by packagers. Code signing doesn't solve world hunger but it doesn't mean it's all evil. > Problem for who? ISVs and ultimately their users.